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L8: Entry 1 of 9 



File: USPT 



Apr 15, 2003 



DOCUMENT-IDENTIFIER: US 6549533 Bl 

TITLE: Managing switched virtual circuits in a network 



Detailed Description Text (7) : 

Generally, with NMS 214 connected to FR network 200, the system may provision 
customers, establish SLAs, monitor service requests, and allocate and establish 
appropriate FR SVCs. During SVC operation, the system may track usage, service 
levels, bandwidth and costs. After tear down of the FR SVC on completion, the 
system may log usage, SVC bandwidth utilization, duration and customer use and 
billing information, and archive and report the information to service providers, 
managers an d customers . By managing the entire process from customer account and 
SLA establishment, frame relay SVC set up, bandwidth- and SLA-based rule set 
decision making, and usage information accumulation and reporting, NMS 214 
generally provides complete administrative control to the service provider for 
managing SVCs in a VCS network. 
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(54) MANAGING SWITCHED VIRTUAL 
CIRCUITS IN A NETWORK 

(75) Inventor: Walter Blanton Campbell, Granite 
Bay, CA (US) 

(73) Assignee: Objective Systems Integrators, 
Folsom, CA (US) 

( * ) Notice: Subject to any disclaimer, the term of this 
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U.S.C. 154(b) by 0 days. 
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"NetExpert® Framework Overview" copyright 1997, 
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* cited by examiner 

Primary Examiner— Wellington Chin 
Assistant Examiner— M. Phan 

(74) Attorney, Agent, or Firm — Fulbright & Jaworski L.L.P. 

(57) ABSTRACT 

A system and method for managing switched virtual circuits 
in a virtual circuit switched network. A preferred embodi- 
ment method for managing switched virtual circuits com- 
prises determining that a switched virtual circuit has been 
established in a virtual circuit switched network by a net- 
work access device, monitoring the switched virtual circuit 
while the switched virtual circuit is active, and storing 
bandwidth and duration information for the switched virtual 
circuit upon termination of the switched virtual circuit. 
Another preferred embodiment method comprises receiving 
a request for establishing the switched virtual circuit from a 
network access device, generating connection parameters 
for establishing the switched virtual circuit in the virtual 
circuit switched network, and sending a reply including the 
connection parameters to the network access device. A 
preferred embodiment network management system com- 
prises a network access device gateway having an interface 
to a network access device in the virtual circuit switched 
network, a network administrator database connected to the 
gateway, the database including rules and objects represent- 
ing characteristics of the virtual circuit switched network, 
and a rule engine connected to the gateway and having 
access to the rules and objects in the database. The present 
invention enables end users to request and use switched 
virtual circuits and realize the benefits in cost and efficiency 
over private virtual circuits, and providing service providers 
with increased bandwidth utilization and improved profit- 
ability. 
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File: USPT 



Mar 26, 2002 



DOCUMENT-IDENTIFIER: US 6363056 Bl 

TITLE: Low overhead continuous monitoring of network performance 
Brief Summary Text (8) : 

Consider a network operator with N access points provided to a customer. These 
access points are intermediaries along the path that a packet takes from the 
customer network. Performance monitoring of the network operation requires 
monitoring the N . times . (N-l ) simplex channels between the pair-wise access points, 
and determining performance metrics such as delay between these access points. 
Another useful metric is the determination of the bandwidth that is being used 
between the different access points. The bandwidth usage is often a component in 
the price charged to the customer by the operator. 
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MONITORING OF NETWORK 
PERFORMANCE 
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(73) Assignee: Internationa] Business Machines 
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* cited by examiner 



Primary Examiner— Ricky Ngo 

(74) Attorney, Agent, or Firm— Louis P Herzberg 

(57) ABSTRACT 

A method, apparatus, article of manufacture and computer 
product for low-overhead continuous monitoring of network 
performance in an intranet or Internet topology. Probe 
packets are sent from ingress access routers where they are 
received and processed by egress access routers. Probe 
packets are generated by copying every Nth packet being 
sent by an ingress access router. In the event an access router 
does not receive the probe packet, the probe packet is 
discarded through normal network delivery mechanisms. 
Network delay is determined by subtracting the time that a 
probe packet was received with the time stamp enclosed in 
the probe packet. Round trip time is established by reflecting 
the probe packet back to the originating access router and 
computing the round trip time. Bandwidth monitoring is 
achieved by using the number of probe packets received to 
estimate the expected amount of network traffic to be 
received. Fault monitoring is accomplished by comparing 
the number of probe packets received with the number of 
actual packets received. When the low overhead mecha- 
nisms indicate that network delays or faults exist, a heavy 
weight monitoring protocol is started between two access 
routers in question. 
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May 29, 2001 



DOCUMENT- IDENTIFIER : US 6240402 Bl 

TITLE: Charge allocation in a multi-user network 



Brief Summary Text ( 5 ) : 

Where the network has some means of controlling customer access (access control) to 
the network then this same mechanism can also be used to monitor, and hence charge 
for, customers 1 usage of the network . A network incorporating access control means 
is shown schematically in FIG. 1. Users access the network designated generally as 
1 via one of a plurality of terminals 2 all of which are connected to the network 
backbone 3. Each terminal 2 accesses the network backbone 3 via a respective access 
control 4-. In the example shown the access control 4 is terminal-specific and can 
be arranged to record charging data such as call length, call type and/or call 
duration and ensure that the charge is attributed to the associated terminal 2. 
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(57) ABSTRACT 

A communication network includes a communication moni- 
toring point arranged to monitor user identifiers in source/ 
destination identifier fields to determine a charging scheme. 
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L8: Entry 4 of 9 File: USPT Jan 9, 2001 



DOCUMENT- IDENTIFIER : US 6173326 Bl 

TITLE: Broadband communications network services access platform 



Brief Summary Text (17) : 

There have been attempts in the prior art at monitoring data network system usage 
at the customer's premises to aid in building databases typically used for billing 
the end-user. One monitoring method, utilized specifically in the television 
industry, identifies a local oscillator signal and its harmonic radiation and/or 
propagation which thus identifies the particular frequency being used by the end- 
user. This method and an apparatus to accomplish the same is disclosed in U.S. Pat. 
No. 4,723,302 to Fulmer et al . , which is incorporated herein by reference. The 
local oscillator signal, however, is a parasitic effect of a television and 
essentially an undesired result. Consequently, future televisions will eventually 
eliminate it, thus rendering such methods of detection obsolete and unusable. 
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NETWORK SERVICES ACCESS PLATFORM 

(76) Inventor: Francis R. Collins, 176 Rangeley Rd., 
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( * ) Notice: Under 35 U.S.C 154(b), the term of this 
patent shall be extended for 0 days. 
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(57) ABSTRACT 

A system for controlling access to, service transmission 
from, and use of an information transmission network which 
provides an end -user with at will access to the broadband/ 
narrowband service networks deployed in the cable televi- 
sion industry, telephone industry, the multi-media 
information/services network technology, and the video dial 
tone industry. Allows the end-user to control the type of 
services to which such end-user has access to. Network 
service providers have the ability to provide targeted com- 
mercials. Independent interfaced subsystems are combined 
to yield the network services access system. 
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File: USPT 



Aug 31, 1999 



DOCUMENT- IDENTIFIER : US 5946302 A 

TITLE: System and method for response time measurement in high speed data 
transmission networks 



Brief Summary Text (5) : 

In many communications environments, billing customers for network usage is 
important, particularly the ability of a network to respond to a transaction in a 
timely manner. For example, a workstation could be part of a business where 
customers come in to make airline reservations. It is important that the 
reservation request receive a prompt response from a central processing center. Not 
only is the return information important to the customer, the response time is 
important to the system operator to provide an efficient dispatching of the 
requests. Moreover, service agreements between travel agencies and reservation 
systems require a quality of service and timely network response. A system and 
method which monitors in real time the response time characteristics of the data 
processing environment will provide information on the quality of service provided 
by the network . Also, the information can assist in establishing a better path 
through the communications network or more efficient dispatching of applications at 
the host to meet service agreement requirements. 
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[57] ABSTRACT 

A high speed data communication network is adapted to 
monitor and measure response time between a work station 
and a central host or processor coupled to the data commu- 
nications network through a media, such as token ring, 
FDDI, Ethernet, etc. As the workstation communicates with 
the processor, a flag is set in a packet transmitted to the 
processor. The packet traverses the network to an application 
in the processor and a response returns which includes a flag. 
Each flag is a specific bit pattern. A programmable digital 
filter recognizes the flags and counts the number of bits on 
the network between the flags in the forward and reverse 
direction. By counting the bits on the media, when the flag 
moves in one direction or another, the total number of bits 
transmitted on the media between the two intervening flags 
is determined. The media speed is used as a clock. The 
number of bits counted divided by the media speed deter- 
mines the response time with fine resolutions. All of the 
measurements are done in near real time without the use of 
clocks or off-line processing of data to determine response 
time. The measurements can be done for half duplex or full 
duplex operation of a network. The measurements can be 
also used in the network to initiate performance changes 
according to the response time. 
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DOCUMENT -IDENTIFIER : US 5862324 A 

TITLE: Broadband communications network services access platform 
Brief Summary Text (17) : 

There have been attempts in the prior art at monitoring data network system usage 
at the customer's premises to aid in building databases typically used for billing 
the end-user. One monitoring method, utilized specifically in the television 
industry, identifies a local oscillator signal and its harmonic radiation and/or 
propagation which thus identifies the particular frequency being used by the end- 
user. This method and an apparatus to accomplish the same is disclosed in U.S. Pat. 
No. 4,723,302 to Fulmer et al., which is incorporated herein by reference. The 
local oscillator signal, however, is a parasitic effect of a television and 
essentially an undesired result. Consequently, future televisions will eventually 
eliminate it, thus rendering such methods of detection obsolete and unusable. 
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[57] ABSTRACT 

A system for controlling access to, service transmission 
from, and use of an information transmission network which 
provides an end-user with at will access to the broadband/ 
narrowband service networks deployed in the cable televi- 
sion industry, telephone industry, the multi-media 
information/services network technology, and the video dial 
tone industry. Allows the end-user to control the type of 
services to which such end-user has access to. Network 
service providers have the ability to provide targeted com- 
mercials. Independent interfaced subsystems are combined 
to yield the network services access system. 
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L8: Entry 7 of 9 File: USPT Sep 1, 1998 



DOCUMENT- IDENTIFIER : US 5802302 A 

TITLE: System and method for response time measurement in high speed data 
transmission networks 



Brief Summary Text (5) : 

In many communications environments, billing customers for network usage is 
important, particularly the ability of a network to respond to a transaction in a 
timely manner. For example, a workstation could be part of a business where 
customers come in to make airline reservations. It is important that the 
reservation request receive a prompt response from a central processing center. Not 
only is the return information important to the customer, the response time is 
important to the system operator to provide an efficient dispatching of the 
requests. Moreover, service agreements between travel agencies and reservation 
systems require a quality of service and timely network response. A system and 
method which monitors in real time the response time characteristics of the data 
processing environment will provide information on the quality of service provided 
by the network . Also, the information can assist in establishing a better path 
through the communications network or more efficient dispatching of applications at 
the host to meet service agreement requirements. 
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[57] 



ABSTRACT 



A high speed data communication network is adapted to 
monitor and measure response time between a work station 
and a central host or processor coupled to the data commu- 
nications network through a media, such as token ring. 
FDDI. Ethernet, etc. As the workstation communicates with 
the processor, a flag is set in a packet transmitted to the 
processor. The packet traverses the network to an application 
in the processor and a response returns which includes a flag. 
Each flag is a specific bit pattern. A programmable digital 
filter recognizes the flags and counts the number of bits on 
the network between the flags in the forward and reverse 
direction. By counting the bits on the media, when the flag 
moves in one direction or another, the total number of bits 
transmitted on the media between the two intervening flags 
is determined. The media speed is used as a clock. The 
number of bits counted divided by the media speed deter- 
mines the response time with fine resolutions. Ail of the 
measurements are done in near real time without the use of 
clocks or off-line processing of data to determine response 
time. The measurements can be done for half duplex or full 
duplex operation of a network. The measurements can be 
also used in the network to initiate performance changes 
according to the response time. 
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L8: Entry 8 of 9 



File: USPT 



Sep 17, 1996 



DOCUMENT- IDENTIFIER: US 5557746 A 

TITLE: System and method for recording accounting times 



Brief Summary Text (10) : 

The Manager is responsible for, among other things, monitoring network performance 
and status, controlling operational parameters, and reporting, analyzing and 
isolating faults in its managed domain. Furthermore, the Manager must maintain 
accounting data of the activity in its managed domain for customer billing, 
performance analysis, capacity planning and problem determination. In order to 
effectively accomplish these functions, the Manager requires precise and timely 
accounting data, including data related to time, regarding the network activity 
from the nodes in the network. In particular, there are many types of data in which 
an accurate TIME record is required. For example, in order for a network 
administrator to accurately bill a customer for the customer's network usage, the 
network administrator must know the length of time that the customer used the 
network as well as the time of day (and day of the week), i.e., calendar time, as 
usage rates may vary accordingly. 
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[54] SYSTEM AND METHOD FOR RECORDING 
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[57] 



ABSTRACT 



A system and method for recording accounting times by an 
Agent in a network and retrieving the accounting times by 
the network Manager. Three types of data objects in each of 
the Agent's stored records are provided. Record Number is 
the sequence number of the record in the file. Recording 
time is an indication of the time the record was stored in the 
file since a certain point in time, such as after the Agent's 
clock began running. Record Type is the particular type of 
record stored. The Record Type can either be DATA repre- 
senting normal accounting data or TIME representing time 
data used for correlating the Manager's and the Agent's 
time-keeping. Upon receipt of an accounting data record of 
type DATA, the manager uses the record's Recording time 
to help determine the point of time accorded to that event 
The Manager then uses the previous record of type TIME to 
adjust the Recording time of the received accounting data 
record relative to the Manager's precise calendar time. 
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L8: Entry 9 of 9 File: USPT Mar 23, 1993 



DOCUMENT-IDENTIFIER: US 5197002 A 

TITLE: Methods and apparatus for dynamic hashing 



Detailed Description Text (3) : 

If the data packet transmission network of FIG. 1 is provided by a common carrier, 
or if shared use of the network is contemplated, then it is necessary to assign the 
costs of building and maintaining the network to a plurality of users in some way 
(which is c onsid ered fair and reasonable to those users. One such method of 
assignin-g^osts^is^Galled usage sensitive billing. . In_usage sensitive bill ing, each 
user isf monitored^ to determine how much use that user makes of the network, and the 
user is^tiien^rTiiled proportionally to that usage. The normal elements of usage are 
the number of message packets delivered by the network, the length of those 
delivered message packets, and the length of the route over which the delivered 
message packets must travel in order to reach the desired destination. If each of 
the packet switches of network 14 creates a billing record when packets are 
delivered, and if that billing record includes the source address, the destination 
address and a count of the number of packets delivered, then usage sensitive 
billing records can be constructed from those billing records. The format of a 
typical billing record is shown in FIG. 2. In FIG. 1, it is assumed that the one of 
packet switches 10-13 which is connected to the destination station generates the 
billing record after delivering the message packet to the proper destination. All 
of these billing records are delivered to a common billing system 19 where usage 
charges can be accumulated for each of the customers of the network 14. A single 
billing record, or a plurality of such billing records, can be formatted as a 
standard message packet and launched on the packet switching network 14 of FIG. 1 
with a destination of billing system 19. Alternatively, if the billing message 
packets might overload the capacity of the switching network 14, these billing 
records can be delivered to billing system 19 by separate dedicated transmission 
facilities. In any event, a very large number of billing records are delivered to 
billing system 19, which records must be processed in real time without loss of any 
records. Techniques for the rapid processing of large numbers of records in real 
time is the subject matter of this invention. 
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[57] ABSTRACT 

A system is disclosed for processing billing records in a 
data packet transmission network by optimizing the 
search algorithm for accessing customer records. Using 
hashing techniques, the hashing parameters of hashing 
key and modulus base of the modulo arithmetic are 
varied to optimize the hashing function for recently 
received billing records. These optimum parameters are 
then used predictively to hash the next batch of billing 
records. In a preferred embodiment, the billing records 
are queued in two ping-pong memories and the contents 
of one are used to drive the optimizer while the contents 
of the other are used to drive the billing procedure. 

6 Claims, 5 Drawing Sheets 



BILLING PROCEDURE 




Freeform Search 



Page 1 of 1 



Freeform Search 



Term: 



| US P re-Grant Publication Full-Text Database 



Database: 



US Patents Full-Text Database 



US OCR Full-Text Database 
EPO Abstracts Database 
JPO Abstracts Database 
Derwent World Patents Index 
IBM Technical Disclosure Bulletins 



Ll and (analyz$ with network$ with (volume or 
flow$ or traf fic$) ) .ab. 



Display: |10 j Documents in Display Format : jKWIC [ Starting with Number |T" 

Generate: C Hit List * Hit Count O Side by Side C Image 



Search History 



DATE: Friday, May 27, 2005 Printable Copy Create Case 

Set Name Query 
side by side 

DB=USPT; PLUR=YES; OP=ADJ 
L4 Ll and (analyzS with networks with (volume or flowS or traffic$)).ab. 
L3 Ll and (analyzS with networks with (volume or flow$)).ab. 
L2 Ll and (analyzS with networks with (volume or flowS)) 
Li (709/$.ccls.) 

END OF SEARCH HISTORY 



Hit Count Set Name 
result set 



19 
5 
85 
17919 



L4 
L3 
Ll 
Ll 



http://westbrs:9000/bin/gate.exe?state=sa78nn. 1 1 .7&f=ffsearch 



5/27/05 



Record Display Form 



Page 1 of 1 




L4: Entry 1 of 19 



File: USPT 



May 17, 2005 



DOCUMENT- IDENTIFIER: US 6895438 Bl 

TITLE: Telecommunication-based time-management system and method 



Abstract Text (1) : 

A proxy-server system (15) connected preferably to a computer-telephone system (10) 
intercepts, processes, an d analyzes as traffic-analysis results (68A-C) all forms 
of real- and non-real-time electronic communication passing over the network in the 
form of raw traffic data (61) . The proxy-server system normalizes each 
communication into the measure of time needed by recipient (s) of the communication 
to understand the information contained therein. Once normalized, the data may be 
aggregated into summary reports (69A-C). As part of the analysis, the aggregated 
communication records are compared with user-defined rules to provide alerts if the 
individual or aggregated durations exceed boundaries set by the rules. In one 
embodiment, the summary reports may be integrated with general-ledger data (94) and 
other raw business data (74) via a relational database (72) to derive more accurate 
records of activity-based-costing information (76) . Additionally, the data of the 
summary reports may be visualized in two- or three-dimensional representations of 
communication-flow patterns to illustrate in an intuitive and semantically scalable 
manner the desired level of detail for time and time-based expense consumed by the 
electronic interactions of an individual or organization. 
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(57) ABSTRACT 



A proxy-server system (15) connected preferably to a 
computer-telephone system (10) intercepts, processes, and 
analyzes as traffic-analysis results (68A-C) all forms of real- 
and non-real-time electronic communication passing over 
the network in the form of raw traffic data (61). The 
proxy-server system normalizes each communication into 
the measure of time needed by recipient(s) of the commu- 
nication to understand the information contained therein. 
Once normalized, the data may be aggregated into summary 
reports (69A-C). As part of the analysis, the aggregated 
communication records are compared with user-defined 
rules to provide alerts if the individual or aggregated dura- 
tions exceed boundaries set by the rules. In one embodiment, 
the summary reports may be integrated with general-ledger 
data (94) and other raw business data (74) via a relational 
database (72) to derive more accurate records of activity- 
based-costing information (76). Additionally, the data of the 
summary reports may be visualized in two- or three- 
dimensional representations of communication-flow pat- 
terns to illustrate in an intuitive and semantically scalable 
manner the desired level of detail for time and time-based 
expense consumed by the electronic interactions of an 
individual or organization. 
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L4: Entry 2 of 19 File: USPT Jan 4, 2005 



DOCUMENT- IDENTIFIER: US 6839751 Bl 

** See image for Certificate of Correction ** 

TITLE: Re-using information from data transactions for maintaining statistics in 
network monitoring 



Abstract Text (1) : 

A method of and monitor apparatus fo r analyzing a flow of packets passing through a 
connection point on a computer network . The method includes receiving a packet from 
a packet acquisition device, and looking up a flow-entry database containing flow- 
entries for previously encountered conversational flows. The looking up to 
determine if the received packet is of an existing flow. Each and every packet is 
processed. If the packet is of an existing flow, the method updates the flow-entry 
of the existing flow, including storing one or more statistical measures kept in 
the flow-entry. If the packet is of a new flow, the method stores a new flow-entry 
for the new flow in the flow-entry database, including storing one or more 
statistical measures kept in the flow-entry. The statistical measures are used to 
determine metrics related to the flow. The metrics may be base metrics from which 
quality of service metrics are determined, or may be the quality of service 
metrics . 
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